Lucene search
+L

1889 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/04/01 12:00 a.m.•6 views

CVE-2010-0087: Undefined Security Weakness

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

7.5CVSS6.1AI score0.03337EPSS
SaveExploits0References1
Prion
Prion
•added 2010/03/03 8:30 p.m.•24 views

Buffer overflow

Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service application crash via a crafted ZIP file that is not properly handled when the victim uses the 1 Update or 2 Plug-In console menu item...

4.3CVSS7.3AI score0.02095EPSS
SaveExploits2References2Affected Software1
RedHat Linux
RedHat Linux
•added 2010/03/03 6:20 p.m.•27 views

JDK unspecified vulnerability in JWS/Plugin component

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

7.5CVSS5.8AI score0.03337EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2010/03/03 6:20 p.m.•32 views

JDK unspecified vulnerability in JavaWS/Plugin component

Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect availability via unknown vectors...

5CVSS5.8AI score0.03361EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/03/03 12:00 a.m.•5 views

CVE-2009-4661: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service application crash via a crafted ZIP file that is not properly handled when the victim uses the 1 Update or 2 Plug-In console menu item...

4.3CVSS6AI score0.02095EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2010/01/20 12:00 a.m.•60 views

Mac OS X Multiple Vulnerabilities (Security Update 2010-001)

The remote host is running a version of Mac OS X 10.6 or 10.5 that does not have Security Update 2010-001 applied. This security update contains fixes for the following products : - CoreAudio - CUPS - Flash Player plug-in - ImageIO - Image RAW - OpenSSL C Tenable Network Security, Inc. if...

9.8CVSS7AI score0.87264EPSS
SaveExploits25References15
RedHat Linux
RedHat Linux
•added 2010/01/14 4:32 p.m.•20 views

OpenJDK: Files disclosure, arbitrary code execution via "deserializing applets" (6646860)

Unspecified vulnerability in the Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.219 and earlier; and 1.3.124 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors...

6.4CVSS6.5AI score0.04519EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2010/01/14 4:32 p.m.•14 views

OpenJDK: Intended access restrictions bypass via LiveConnect (6724331)

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.219 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted...

5.8CVSS6AI score0.02165EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2010/01/14 4:32 p.m.•19 views

OpenJDK: Improper parsing of crossdomain.xml files (intended access restriction bypass) (6798948)

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948...

6.4CVSS6.2AI score0.03558EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2010/01/06 12:00 a.m.•30 views

CentOS 5 : evolution (CESA-2008:0514)

Updated evolution packages that fix two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail, calendaring, contact...

9.3CVSS6.8AI score0.05748EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2009/12/23 12:00 a.m.•34 views

Winamp Module Decoder Plug-in Multiple Buffer Overflow Vulnerabilities

This host is installed with Winamp and is prone to multiple Buffer Overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodwinampmultbofvulndec09.nasl 6530 2017-07-05 06:23:50Z cfischer $ Winamp Module Decoder Plug-in Multiple Buffer Overflow Vulnerabilities Authors: Antu Sanadi Copyright...

9.3CVSS1.2AI score0.06722EPSS
SaveExploits2References6
OSV
OSV
•added 2009/12/18 7:30 p.m.•6 views

DEBIAN-CVE-2009-3996

Heap-based buffer overflow in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file...

9.3CVSS8AI score0.06477EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2009/12/18 7:00 p.m.•45 views

CVE-2009-3996

Heap-based buffer overflow in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file...

9.3CVSS7.8AI score0.06477EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/18 12:00 a.m.•6 views

CVE-2009-3996: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in INMOD.DLL aka the Module Decoder Plug-in in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file...

9.3CVSS6.8AI score0.06477EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2009/12/17 12:00 a.m.•37 views

Winamp < 5.57 Multiple Vulnerabilities

Binary data 5267.prm...

9.3CVSS6.7AI score0.06722EPSS
SaveExploits2References10
RedHat Linux
RedHat Linux
•added 2009/12/11 1:42 p.m.•13 views

OpenJDK: Intended access restrictions bypass via LiveConnect (6724331)

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.219 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted...

5.8CVSS6AI score0.02165EPSS
SaveExploits0References4
Prion
Prion
•added 2009/12/02 6:30 p.m.•21 views

Design/Logic Flaw

WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message...

5CVSS6.7AI score0.06392EPSS
SaveExploits2References2Affected Software1
NVD
NVD
•added 2009/12/02 6:30 p.m.•25 views

CVE-2009-4170

WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message...

5CVSS6.2AI score0.06392EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2009/12/02 6:00 p.m.•43 views

CVE-2009-4169

Cross-site scripting XSS vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.8AI score0.01795EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/02 12:00 a.m.•4 views

CVE-2009-4169: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.01795EPSS
SaveExploits0References2
Rows per page
Query Builder